PF_FILE_EXTENTS_INFO_V2 - NtDoc

Native API online documentation, based on the System Informer (formerly Process Hacker) phnt headers
#ifndef _NTPFAPI_H

/**
 * The PF_FILE_EXTENTS_INFO_V2 structure queries file retrieval extents and volume identity.
 */
typedef struct _PF_FILE_EXTENTS_INFO_V2
{
    ULONG Version;                              // PF_FILE_EXTENTS_INFO_VERSION2
    ULONG Reserved0;                            // Reserved field; initialize to zero and do not interpret on output.
    PWSTR FilePath;                             // NUL-terminated native path.
    ULONG FilePathSize;                         // Bytes including NUL; even, 2..0x100000.
    ULONG VolumePathSize;                       // Even, nonzero byte offset of the backslash after the volume path; < FilePathSize.
    LARGE_INTEGER FileIndexNumber;              // Output for a file with no retrieval extents (STATUS_END_OF_FILE).
    ULONG VolumeSerialNumber;                   // Output.
    ULONG Reserved1;                            // Reserved field; initialize to zero and do not interpret on output.
    PRETRIEVAL_POINTERS_BUFFER ExtentsBuffer;   // Caller-owned output buffer, not an inline structure.
    ULONG ExtentsBufferSize;                    // In: capacity; out: required/returned bytes. Maximum allocation 0xa00000.
    ULONG Reserved2;                            // Reserved field; initialize to zero and do not interpret on output.
} PF_FILE_EXTENTS_INFO_V2, *PPF_FILE_EXTENTS_INFO_V2;

#endif

View code on GitHub

NtDoc

No description available.